# Constellation Pod IP range to expose via VPN. The default is for GCP.
podCIDR: "10.10.0.0/16"

# Constellation Service IPs to expose via VPN. The default is for GCP.
serviceCIDR: "10.96.0.0/12"

# on-prem IP ranges to expose to Constellation. Must contain at least one CIDR.
peerCIDRs: []

# IPSec configuration
ipsec:
  # pre-shared key used for authentication
  psk: ""
  # Address of the peer's gateway router.
  peer: ""

image: "ghcr.io/edgelesssys/constellation/vpn@sha256:34e28ced172d04dfdadaadbefb1a53b5857cb24fb24e275fbbc537f3639a789e"